Sysdig Secure for cloud

Sysdig Secure for cloud is the software that connects Sysdig Secure features to your cloud environments to provide unified threat detection, compliance, forensics, and analysis.

Because modern cloud applications are no longer just virtualized compute resources, but a superset of cloud services on which businesses depend, controlling the security of your cloud accounts is essential. Errors can expose an organization to risks that could bring resources down, infiltrate workloads, exfiltrate secrets, create unseen assets, or otherwise compromise the business or reputation. As the number of cloud services and configurations available grows exponentially, using a cloud security platform protects against having an unseen misconfiguration turn into a serious security issue.

Supported Clouds

Features

Installation

Setup options, details, troubleshooting, and validation steps for the various cloud vendors under Installations

Summary

CloudSingle SetupOrganizational SetupEvent SourceDeployment OptionsImage Scanning OptionsSysdig Role Setup for ComplianceSpawned Scanning Service
AWSAccountOrganization with member accountsCloudtrailECS, Apprunner, K8sECS deployed images,
ECR, Public Repositories		IAM Role with Trusted IdentityCodebuild project
GCPProjectOrganization with member projectsProject/Organization Sink,
GCR PubSub Topic		CloudRun, K8sCloudRun deployed images,
GCR, Public Repositories		Workload Identity FederationCloudbuild task
AzureSubscriptionTenant subscriptionsEventHub, EventgridAzure Container Instances(ACI), K8sACI deployed images,
ACR, Public Repositories		Azure LighthouseACR Task
AWS

GCP

Azure